Cybersecurity Lead – Medical Devices

About Analog Devices

Analog Devices, Inc. (NASDAQ: ADI ) is a global semiconductor leader that bridges the physical and digital worlds to enable breakthroughs at the Intelligent Edge. ADI combines analog, digital, and software technologies into solutions that help drive advancements in digitized factories, mobility, and digital healthcare, combat climate change, and reliably connect humans and the world. With revenue of more than $9 billion in FY24 and approximately 24,000 people globally, ADI ensures today's innovators stay Ahead of What's Possible™. Learn more at www.analog.com and on LinkedIn and Twitter (X).

Cybersecurity Lead - Medical Devices

Software and Digital Platforms Group

Analog Devices (NASDAQ: ADI) designs and manufactures semiconductor products and solutions. We enable our customers to interpret the world around us by intelligently bridging the physical and digital worlds with unmatched technologies that sense, measure, and connect.

The Role

The Software and Digital Platforms Team within Analog Devices is seeking a proactive Information Security Engineer with management responsibilities to lead our security initiatives and protect organizational software assets. This role involves overseeing all security needs for a designated portfolio of projects, ensuring comprehensive security coverage. The position requires coordinating with other security team members and corporate groups to execute strategic security initiatives while identifying, assessing, and mitigating security vulnerabilities throughout the software development lifecycle.

Job Responsibilities

• Develop, review, and maintain information security policies, and procedures while managing ISMS execution using security calendars to ensure repeatable, auditable operations and compliance with regulatory requirements.
• Continuously evaluate and enhance the group's information security program to effectively adapt to evolving risks, threats, and operational challenges.
• Collaborate closely with corporate security teams to leverage available tools, resources, and infrastructure that enhance and support project portfolio security requirements.
• Collaborate with engineering teams to design secure architectures, review system designs, and ensure security control alignment requirements.
• Implement and manage security monitoring tools and technologies, analyze logs and alerts to detect and respond to security threats in real-time.
• Implement robust access control mechanisms for sensitive systems and resources while fostering organizational security awareness and accountability culture.
• Evaluate third-party vendor and service provider security posture, establish vendor risk management processes to monitor, assess, and mitigate security risks.
• Develop comprehensive incident response procedures, lead security investigations, coordinate response efforts with internal and external stakeholders, and implement corrective actions to prevent recurrence.

Minimum Qualifications

• Bachelor's degree in CS, Cybersecurity, or related technical field, or equivalent professional experience. 5-10 years of experience in information security roles and audit/compliance areas
• Knowledge of common security vulnerabilities (OWASP Top 10), security testing tools (SAST/DAST), and threat modeling methodologies.  Experience with security frameworks and standards (such as NIST, ISO 27001).
• Strong communication and presentation skills with ability to report security updates to leadership and influence security strategy decisions
• Proven track record of leading cross-functional teams, managing security projects and mentoring junior staff
• Experience with budget management, vendor relationships, and establishing security policies and procedures.

Additional Desirable Skills, Knowledge, and Abilities

• Industry certifications such as ISC2, CISSP, CEH, or GSEC
• Familiarity with programming languages (i.e. Java, Python, C, etc) and understanding of secure coding practices.

For positions requiring access to technical data, Analog Devices, Inc. may have to o